Norton AntiVirus Intelligent Updater Installation Instructions Copyright 1997-1998 Symantec Corporation All rights reserved Intelligent Updater =================== This program automatically updates Norton AntiVirus with the latest virus definitions. It automatically searches for Norton AntiVirus on your computer and updates the necessary files. This document includes installation instructions for the following platforms: I. Norton AntiVirus 2.0 for Windows 95 II. Norton AntiVirus 4.0 for Windows 95 III. Norton AntiVirus 3.0 and 4.0 for DOS / Windows 3.x IV. NT Tools, NT Scanner and Norton AntiVirus 2.0 for Windows NT V. Norton AntiVirus 4.0 for Windows NT VI. Norton AntiVirus 2.0 for NetWare VII. Norton AntiVirus 4.0 for NetWare VIII. Norton AntiVirus Network Manager IX. Norton AntiVirus Network Manager for Win95 and WinNT X. Norton System Center XI. Norton AntiVirus for NT Server, DEC Alpha version It also includes instructions and resources for manual updates. XII. Installing Virus Definition Files Manually XIII. Intelligent Updater File List ===================================================================== Installation Files and Disk Sets ===================================================================== The Intelligent Updater installation disks or CD contains several executable files. The filenames change from week to week. They show the month (mm) and day (dd) that the definitions were released. Filename: Description: ------------------------------------------------------------------ mmddI32.EXE Intelligent Updater (v4.0) updates - Norton AntiVirus for Windows 95 - Norton AntiVirus for Windows NT Workstations - Norton AntiVirus for NT Servers mmddI321.EXE Two-file, floppy disk version of mmddI32.EXE and (above). Copy these two files into the same mmddI322.ZIP directory and run mmddI321.EXE, or run it from a floppy drive. mmddN16.EXE Intelligent Updater (v1.7) updates - Norton AntiVirus for Netware mmddN161.EXE Two-file, floppy disk version of mmddN16.EXE and (above). Copy these two files into the same mmddN162.ZIP directory and run mmddN161.EXE, or run it from a floppy drive. mmddI16.EXE Intelligent Updater (v1.7) updates - Norton AntiVirus for DOS and Windows 3.x - Norton AntiVirus v2 for Windows 95 - Norton AntiVirus v2 for Windows NT - NT Tools - NT Scanner mmddI161.EXE Two-file, floppy disk version of mmddI16.EXE and (above). Copy these two files into the same mmddI162.ZIP directory and run mmddI161.EXE, or run it from a floppy drive. mmddX86.EXE Intelligent Updater (v2.03) updates - Norton AntiVirus for DOS and Windows 3.x - Norton AntiVirus for Windows 95 - Norton AntiVirus for Windows NT - Norton AntiVirus for Netware - Norton AntiVirus for Windows NT Workstations - Norton AntiVirus for NT Servers - NT Tools - NT Scanner - Norton System Center This is a large file for administrators who update multiple versions of Norton AntiVirus. For more information, refer to the .txt files that come with this program. It is not available on floppy disk. mmddA32.ZIP This is a zip file that contains the definitions for Norton AntiVirus for NT Server, DEC Alpha version. ===================================================================== I. Norton AntiVirus 2.0 for Windows 95 ===================================================================== IMPORTANT! Check the Norton AntiVirus version first -------------------------------------------------------------------- These new virus definitions are not compatible with older versions of Norton AntiVirus, and may cause it to report false virus detections. To see which version you are using, click Help on the Norton AntiVirus menu bar. Then select About Norton AntiVirus. Norton AntiVirus 2.0 users should be using version 2.01. If you need to update Norton AntiVirus, the patch filename is NAV95201.EXE. This patch is available on the Symantec BBS (541-484-6669), the Symantec FTP site (ftp://ftp.symantec.com/public/...), the Symantec Web site (http://www.symantec.com/nav/index_updates.html), CompuServe, or America Online. You can also call Customer Service at (800) 441-7234 to order a disk set. Download or copy the patch file to a temporary directory and run it to extract the necessary files. Then click Setup to begin the installation process. After applying this patch, you must update the virus definition set. Updating Norton AntiVirus 2.0 virus definition files -------------------------------------------------------------------- 1. Run the file mmddI16.EXE (or mmddI161.EXE if using the two-file floppy disk set). The mmdd represents the date of the definition set. For example, the filename would be 1231I16.EXE for the December 31 definition set. 2. Follow the instructions on the screen. 3. Start Norton AntiVirus and scan your drive before you reboot your computer to activate the new virus definitions and rebuild critical files. 4. Restart your computer so that Auto-Protect uses the new definitions. ===================================================================== II. Norton AntiVirus 4.0 for Windows 95 ===================================================================== 1. Run the file mmddI32.EXE (or mmddI321.EXE if using the two-file, floppy disk set). The mmdd represents the date of the definition set. For example, the filename would be 1231I32.EXE for the December 31 definition set. 2. Follow the instructions on the screen. ===================================================================== III. Norton AntiVirus 3.0 and 4.0 for DOS / Windows 3.x ===================================================================== IMPORTANT! Check the Norton AntiVirus version first -------------------------------------------------------------------- Check the date of the Norton AntiVirus executable files (NAV.EXE, NAVW.EXE) to see if they are earlier than June 1, 1996. If they are, update them with the UPDATEME.EXE patch. This patch is available on the Symantec BBS (541-484-6669), the Symantec FTP site (ftp://ftp.symantec.com/public/...), the Symantec Web site (http://www.symantec.com/nav/index_updates.html), CompuServe, or America Online. You can also call Customer Service at (800) 441-7234 to order a disk set. These new virus definitions are not compatible with older versions of Norton AntiVirus, and may cause them to report false virus detections. Download or copy the patch file to a temporary directory and run it to extract the necessary files. Then follow the directions in the READ.ME file. This patch contains the April 1997 virus definition set. After applying this patch, you must update the virus definition set. Updating NAV 3.0/4.0 virus definition files using Windows 3.x -------------------------------------------------------------------- 1. Run the file mmddI16.EXE (or mmddI161.EXE if using the two-file floppy disk set). The mmdd represents the date of the definition set. For example, the filename would be 1231I16.EXE for the December 31 definition set. 2. Follow the instructions on the screen. 3. Start Norton AntiVirus and scan your drive before you reboot your computer to activate the new virus definitions and rebuild critical files. 4. Restart your computer so that Auto-Protect uses the new definitions. Updating NAV 3.0/4.0 virus definition files using DOS -------------------------------------------------------------------- 1. If you are running Windows, exit to DOS. To do this, select Exit from the File menu. 2. Make sure you have a temporary directory on your system that you can use to unload the virus definitions. Set this directory in DOS using the SET command. For example, type SET TEMP=C:\TEMP if the temporary directory is C:\TEMP. 3. Run the file mmddI16.EXE (or mmddI161.EXE if using the two-file floppy disk set). The mmdd represents the date of the definition set. For example, the filename would be 1231I16.EXE for the December 31 definition set. 4. Follow the instructions on the screen. 5. Start Norton AntiVirus and scan your drive before you reboot your computer to activate the new virus definitions and rebuild critical files. 6. Restart your computer so that Auto-Protect uses the new definitions. Troubleshooting -------------------------------------------------------------------- If the VIRSCAN.ZIP files are not deleted after a failed or cancelled attempt at updating the virus definitions, they can cause errors when running the Intelligent Updater program. To prevent these types of errors, make sure that the temporary directory is empty before starting the update. ===================================================================== IV. NT Tools, NT Scanner and Norton AntiVirus 2.0 for Windows NT ===================================================================== 1. Run the file mmddI16.EXE (or mmddI161.EXE if using the two-file floppy disk set). The mmdd represents the date of the definition set. For example, the filename would be 1231I16.EXE for the December 31 definition set. 2. Follow the instructions on the screen. 3. Start Norton AntiVirus and scan your drive before you reboot your computer to activate the new virus definitions and rebuild critical files. 4. Restart your computer so that Auto-Protect uses the new definitions. ===================================================================== V. Norton AntiVirus 4.0 for Windows NT ===================================================================== 1. Run the file mmddI32.EXE (or mmddI321.EXE if using the two-file floppy disk set). The mmdd represents the date of the definition set. For example, the filename would be 1231I32.EXE for the December 31 definition set. 2. Follow the instructions on the screen. ===================================================================== VI. Norton AntiVirus 2.0 for NetWare ===================================================================== IMPORTANT! Check the Norton AntiVirus version first -------------------------------------------------------------------- If your version of NAV 2.0 for NetWare is dated earlier than December 13, 1995, you must upgrade your software before updating the virus definition files. The newer releases of Norton AntiVirus for NetWare v2 detect and remove Microsoft Word and Excel macro viruses. For information on how to receive the update, call Customer Service at (800) 441-7234. To update Norton AntiVirus for NetWare virus definition files: -------------------------------------------------------------------- 1. On a workstation connected to the network, map a drive letter to the volume and directory where Norton AntiVirus for Netware is installed. You must have read and write access to the mapped drive. 2. Disable the Norton AntiVirus for NetWare NLM. To do this, select DISABLE NLM from the Tools menu in the Norton AntiVirus for NetWare Windows configuration window. Or, you can press F3 at the NAVNLM server console screen. 2. At a DOS prompt, change to the directory that contains the Intelligent Updater file. 3. From a DOS prompt, type mmddN16.EXE [path] (or mmddN161.EXE [path] if using the two-file floppy disk set) where the [path] is the location you mapped in step 1. The mmdd represents the date of the definition set. For example, the filename would be 1231N16.EXE for the December 31 definition set. 6. Follow the instructions on the screen. 7. Enable the Norton AntiVirus for NetWare NLM. Choose ENABLE NLM from the Tools menu in the Norton AntiVirus for NetWare Windows configuration window. Or, you can press F2 at the NAVNLM server console screen. 8. If you created a temporary drive mapping, delete it. ===================================================================== VII. Norton AntiVirus 4.0 for NetWare ===================================================================== 1. On a workstation connected to the network, map a drive letter to the volume and directory where Norton AntiVirus for Netware is installed. You must have read and write access to the mapped drive. 2. Disable the Norton AntiVirus for NetWare NLM. To do this, select DISABLE NLM from the Tools menu in the Norton AntiVirus for NetWare Windows configuration window. Or, you can press F3 at the NAVNLM server console screen. 4. At a DOS prompt, change to the directory that contains the Intelligent Updater file. Type mmddN16.EXE [path] (or mmddN161.EXE [path] if you are updating from a floppy disk) where the [path] is the location you mapped in step 1. The mmdd represents the date of the definition set. For example, the filename would be 1231I16.EXE for the December 31 definition set. 5. Follow the instructions on the screen. 6. Enable the Norton AntiVirus for NetWare NLM. Choose ENABLE NLM from the Tools menu in the Norton AntiVirus for NetWare Windows configuration window. Or, press F2 at the NAVNLM server console screen. 7. If you created a temporary drive mapping, delete it. ===================================================================== VIII. Norton AntiVirus Network Manager ===================================================================== IMPORTANT! Check the Norton AntiVirus version first -------------------------------------------------------------------- Check the date of the Norton AntiVirus Network Manager executable file (NAVNET.EXE) to see if it is earlier than June 1, 1996. If it is, you must update it with the UPDATEME.EXE patch before installing these definitions. These new virus definitions are not compatible with older versions of Norton AntiVirus, and may cause it to report false virus detections. This patch is available on the Symantec BBS (541-484-6669), the Symantec FTP site (ftp://ftp.symantec.com/public/...), the Symantec Web site (http://www.symantec.com/nav/index_updates.html), CompuServe, or America Online. You can also call Customer Service at (800) 441-7234 to order a disk set. Download or copy the UPDATEME.EXE patch file to a temporary directory. The network files must exist in your local directory or the UPDATEME.EXE patch will not extract the network files. Copy NAVNET.EXE and NAVNETW.EXE to your local NAV directory. Then run UPDATEME.EXE to extract the files. The complete directions are explained in the READ.ME file. After updating Norton AntiVirus Network Manager, recreate your .NNS files using the new _DEFAULT.NNS as a template. For more information on recreating .NNS files, order FaxBack #913024 from our free FaxBack service at (541) 984-2490, option 2. The NAV 3.11 patch contains the April 1997 virus definition set. You must apply the latest virus definition set update after completing the program update. Updating Norton AntiVirus Network Manager virus definitions -------------------------------------------------------------------- 1. On a workstation connected to the network, map a drive letter to the volume and directory where Norton AntiVirus Network Manager is installed. You must have read and write access to the mapped drive. 2. At a DOS prompt, change to the directory that contains the Intelligent Updater file. 3. Type mmddI16.EXE [path] (or mmddI161.EXE [path] if using the two- disk floppy disk set) where the [path] is the location of the Norton AntiVirus Network Manager that you just mapped. The mmdd represents the date of the definition set. For example, the filename would be 1231I16.EXE for the December 31 definition set. 4. Follow the instructions on screen. 5. Start Norton AntiVirus from the Norton AntiVirus Network Manager directory and scan the Norton AntiVirus Network Manager directory to activate the new virus definitions and rebuild critical files. To do this, type NAV from the Norton AntiVirus Network Manager directory. ===================================================================== IX. Norton AntiVirus Network Manager for Win95 and WinNT ===================================================================== Installing the definitions for Network Manager involves three steps. 1. Find the directory where virus definitions are stored. 2. Copy the appropriate Intelligent Updater program to that directory. 3. Run the Intelligent Updater program using the /dump command to extract the appropriate files. Locating the Definitions Directory -------------------------------------------------------------------- 1. Find the .NNS file that Norton AntiVirus uses to distribute files. To find out which .NNS file the network uses, check the network login script. If it uses a customized .NNS file, the login script will specify the location of that file. If not, search the login script for the location of the NAVCHECK.EXE and NAV32UP.EXE distribution files. The default .NNS file (_DEFLT32.NNS) will be in the directory containing NAVCHECK.EXE and NAV32UP.EXE. 2. Look in the .NNS file for the parameter that points to the virus definitions directory. * In NavNet32 v2.0, the parameter "NAVDefDir" points to the definitions. * In NavNet32 v4.x, the parameter "NAVDefDir95" points to the Norton AntiVirus for Windows 95 definitions. The parameter "NAVDefDirNTWKS" points to the Norton AntiVirus for NT workstation definitions, and "NAVDefDirNTSRV" points to the Norton AntiVirus for NT server definitions. 3. Note the definitions directory to be updated. Updating Definitions for Norton AntiVirus 2.0 -------------------------------------------------------------------- 1. Map a drive letter to the network volume and directory containing the definitions to be updated. You must have WRITE access to the mapped drive. 2. Copy (do not Move) the mmddI16.EXE file to the mapped network definitions directory. The mmdd represents the date of the definition set. For example, the filename would be 1231I16.EXE for the December 31 definition set. 3. Open a command line session (DOS box) and change to the mapped drive containing the older definitions and the new Intelligent Updater program. 4. To update definitions type mmddI16 /DUMP. 5. Delete mmddI16.EXE (or mmddI161.EXE) from the definitions directory. Updating Definitions for Norton AntiVirus 4.0 -------------------------------------------------------------------- 1. Map a drive letter to the network volume and directory containing the definitions to be updated. You must have WRITE access to the mapped drive. 2. Copy (do not Move) the mmddI32.EXE file to the mapped network definitions directory. The mmdd represents the date of the definition set. For example, the filename would be 1231I32.EXE for the December 31 definition set. 3. Open a command line session (DOS box) and change to the mapped drive containing the older definitions and the new Intelligent Updater program. 4. To update definitions type mmddI16 /DUMP 5. Delete mmddI32.EXE from the definitions directory. ===================================================================== X. Norton System Center ===================================================================== See the Norton System Center documentation for instructions on distributing virus definitions with Central LiveUpdate. To distribute virus definition updates without Central LiveUpdate: 1. Download the latest version of Intelligent Updater (v4.0). 2. Copy Intelligent Updater to the definitions folder of your NSC installation. By default the location is the \NSC Repository\Products\NAV\Defs\Intel or Alpha folder. 3. To avoid changing the job every time you update the definitions, rename the Intelligent Updater file as NEWDEFS.EXE and set the job to run this file. Otherwise you will always have to modify the job to use the correct file name. 4. Start Norton System Center and run your virus definitions rollout job. For more information on setting up NSC jobs, see your NSC documentation. Whenever you want to distribute updated virus definitions, download a new Intelligent Updater, copy it to the source distribution folder, rename it NEWDEFS.EXE, and rerun the job. ===================================================================== XI. Norton AntiVirus for NT Server, DEC Alpha version ===================================================================== 1. Download the file mmddA32.ZIP. 2. Unzip this file into the Incoming directory: \Program Files\Common Files\Symantec Shared\VirusDefs\Incoming 3. Norton AntiVirus will automatically begin using the new definitions. ===================================================================== XII. Installing Virus Definition Files Manually ===================================================================== If you do not want Intelligent Updater to install the new virus definitions for you automatically, you can use the /DUMP command to extract the virus definition files, then copy the appropriate files to the virus definitions folder. Installing Virus Definition Files Manually -------------------------------------------------------------------- 1. Copy the Intelligent Updater program (mmddI16.EXE, mmddI161.EXE, mmddI32.EXE, or mmddN16.EXE) to an empty, temporary folder. 2. Launch the Intelligent Updater program using the /DUMP command. This will extract all the virus definitions to the folder. For example, type mmddI32.EXE /DUMP to extract the files. The mmdd represents the date of the definition set. For example, the filename would be 1231I32.EXE for the December 31 definition set. 3. Copy the files to the virus definition folder. If you are using Norton AntiVirus 4.0 for Windows 95 / Windows NT Server & Workstation, copy the files to this location: C:\Program Files\Common Files\Symantec Shared\VirusDefs\Incoming\ NOTE: Copy the file ZDONE.DAT last. This file contains 0 bytes, and signals Norton AntiVirus that the definition set has been completely loaded. If it is not loaded last, it may cause errors. 4. Refer to the Intelligent Updater File List below for information on which files to copy into the Norton AntiVirus folder. ===================================================================== XIII. Intelligent Updater File List ===================================================================== Norton AntiVirus 2.0 for Windows 95 -------------------------------------------------------------------- VIRSCAN.DAT VIRSCAN.INF VIRSCAN2.DAT NAVEX32.DLL NAVEX.VXD NAVEX.EXP TECHNOTE.TXT UPDATE.TXT WHATSNEW.TXT NCSACERT.TXT Norton AntiVirus 3.0 for DOS/Windows -------------------------------------------------------------------- VIRSCAN.DAT VIRSCAN2.DAT VIRSCAN.INF NAVEX.EXP NAVEX16.DLL TECHNOTE.TXT UPDATE.TXT WHATSNEW.TXT NCSACERT.TXT Norton AntiVirus 4.0 for DOS/Windows -------------------------------------------------------------------- VIRSCAN.DAT VIRSCAN2.DAT VIRSCAN5.DAT VIRSCAN.INF NAVEX.EXP NAVEX16.DLL TECHNOTE.TXT UPDATE.TXT WHATSNEW.TXT NCSACERT.TXT Norton AntiVirus 4.0 for Windows 95/NT Server & NT Workstation -------------------------------------------------------------------- VIRSCAN1.DAT VIRSCAN2.DAT VIRSCAN3.DAT VIRSCAN4.DAT VIRSCAN5.DAT VIRSCAN6.DAT VIRSCAN7.DAT VIRSCAN8.DAT VIRSCAN.INF NAVEX32A.DLL NAVEX15.EXP NAVEX15.SYS NAVEX15.VXD NAVENG.EXP NAVENG.VXD NAVENG.SYS NAVENG32.DLL CATALOG.DAT NCSACERT.TXT TECHNOTE.TXT WHATSNEW.TXT UPDATE.TXT ZDONE.DAT Norton AntiVirus 2.0 for Windows NT -------------------------------------------------------------------- VIRSCAN.DAT VIRSCAN2.DAT VIRSCAN.INF NAVEX.SYS NAVEX32.DLL TECHNOTE.TXT UPDATE.TXT WHATSNEW.TXT NCSACERT.TXT Norton AntiVirus 2.0 for NetWare -------------------------------------------------------------------- VIRSCAN.DAT VIRSCAN.INF VIRSCANM.DAT NAVEX.NLM TECHNOTE.TXT UPDATE.TXT WHATSNEW.TXT NCSACERT.TXT Norton AntiVirus 4.0 for NetWare -------------------------------------------------------------------- VIRSCAN.DAT VIRSCAN1.DAT VIRSCAN2.DAT VIRSCAN3.DAT VIRSCAN4.DAT VIRSCAN5.DAT VIRSCAN6.DAT VIRSCAN7.DAT VIRSCAN8.DAT VIRSCANM.DAT VIRSCAN.INF NAVEX15.NLM NAVENG.NLM TECHNOTE.TXT UPDATE.TXT WHATSNEW.TXT NCSACERT.TXT Norton AntiVirus Internet Scanner for Windows 3.1 -------------------------------------------------------------------- VIRSCAN.DAT VIRSCAN.INF NAVEX16.DLL TECHNOTE.TXT UPDATE.TXT WHATSNEW.TXT NCSACERT.TXT Norton AntiVirus Scanner for Windows NT, Norton NT Tools and Internet Scanner for Windows 95 -------------------------------------------------------------------- VIRSCAN.DAT VIRSCAN.INF NAVEX32.DLL TECHNOTE.TXT UPDATE.TXT WHATSNEW.TXT NCSACERT.TXT